Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41150Mermaid Gantt Charts are vulnerable to an Infinite Loop DoSnpm · mermaid · fixed in 11.15.0, 10.9.6
- CVE-2026-41159Mermaid: Improper sanitization of configuration leads to CSS injectionnpm · mermaid · fixed in 11.15.0, 10.9.6
- CVE-2026-46510Prototype pollution in form-data-objectizer via bracket-notation form keysnpm · form-data-objectizer · fixed in 1.0.1
- CVE-2026-45582n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parametersnpm · n8n-mcp · fixed in 2.51.3
- CVE-2026-45707n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incompletenpm · n8n-mcp · fixed in 2.51.2
- CVE-2026-48527HaxCMS has a stored Cross-Site Scripting (XSS) bypass in saveNode endpointnpm · @haxtheweb/haxcms-nodejs · fixed in 26.0.1
- CVE-2026-45364Better Auth: Rate limiter keys IPv6 addresses individually and is bypassable via prefix rotationnpm · better-auth · fixed in 1.4.17, 1.5.0-beta.9
- CVE-2026-45366typescript-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocolnpm · @utcp/http · fixed in 1.1.2
- CVE-2026-46509deepobj: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')npm · @ranfdev/deepobj · fixed in 1.0.3
- CVE-2026-43898SandboxJS: Sandbox escape via Function.caller leakage of internal call opnpm · @nyariv/sandboxjs · fixed in 0.9.6
- CVE-2026-45311CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approvalnpm · deepseek-tui · fixed in 0.8.23
- CVE-2026-45310CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Toolnpm · deepseek-tui · fixed in 0.8.22
- CVE-2026-45058electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmarknpm · electerm
- CVE-2026-45353electerm: Local code through electerm's single-instance socketnpm · electerm · fixed in 3.9.0
- CVE-2026-45787electerm's encrypt method not safe enoughnpm · electerm · fixed in 3.9.5
- CVE-2026-47673Hono: JWT middleware accepts any Authorization scheme, not only Bearernpm · hono · fixed in 4.12.21
- CVE-2026-47674Hono: IP Restriction bypasses static deny rules for non-canonical IPv6npm · hono · fixed in 4.12.21
- CVE-2026-47675Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injectionnpm · hono · fixed in 4.12.21
- CVE-2026-47676Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded pathsnpm · hono · fixed in 4.12.21
- CVE-2026-47762TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` commentsnpm · tinymce · fixed in 7.9.3, 8.5.1
- CVE-2026-47761TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injectionnpm · tinymce · fixed in 7.9.3, 8.5.1
- CVE-2026-47759TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributesnpm · tinymce · fixed in 7.9.3, 8.5.1
- CVE-2026-47760TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGsnpm · tinymce · fixed in 7.1.0
- CVE-2026-9673Versions of the package json-2-csv from 3.15.0 and before 5.5.11 are vulnerable to CSV Injection via the preventCsvInjection option which canpm · json-2-csv · fixed in 5.5.11
- CVE-2026-44720OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeovernpm · openlearnx · fixed in 2.0.4
- CVE-2026-45136claude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.shnpm · claude-code-cache-fix · fixed in 3.5.2
- CVE-2026-45134LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warningnpm · langsmith · fixed in 0.6.0
- CVE-2026-44724systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile namenpm · systeminformation · fixed in 5.31.6
- CVE-2026-44635Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`npm · kysely · fixed in 0.28.17
- CVE-2026-42553Cinny: Access token disclosure via invalidated emoji pack avatar URL in service workernpm · cinny · fixed in 4.10.3